Compromised PyTorch-nightly dependency chain between December 25th and December 30th, 2022.

Steals all your SSH keys!

"If you installed PyTorch-nightly on Linux via pip between December 25, 2022 and December 30, 2022, please uninstall it and torchtriton immediately, and use the latest nightly binaries (newer than Dec 30th 2022)."

#infosec #machinelearning #deeplearning

pytorch.org/blog/compromised-n…

news.ycombinator.com/item?id=3…

PyTorch

An open source machine learning framework that accelerates the path from research prototyping to production deployment.

^pytorch.org